Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/SiyGN2LOnZltKrq27eGSnM7ctjI.mft
File: SiyGN2LOnZltKrq27eGSnM7ctjI.mft (raw, json)
Hash identifier: tkYx6fhDIG5YO5PrpbpcljefFHBIRy87f19U0lmCcR4=
Subject key identifier: 1E:B4:2F:79:6A:CC:03:E9:11:15:2C:FF:FA:3F:15:17:C1:35:10:73
Authority key identifier: 4A:2C:86:37:62:CE:9D:99:6D:2A:BA:B6:ED:E1:92:9C:CE:DC:B6:32
Certificate issuer: /CN=4a2c863762ce9d996d2abab6ede1929ccedcb632
Certificate serial: 019D27E0618FB69AF7BE66E11599A75582D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SiyGN2LOnZltKrq27eGSnM7ctjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/SiyGN2LOnZltKrq27eGSnM7ctjI.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 02:01:49 +0000
Manifest this update: Thu 26 Mar 2026 02:01:49 +0000
Manifest next update: Fri 27 Mar 2026 02:01:49 +0000
Files and hashes: 1: 55lJ7aRN6GIyWx76DhXMl-EsW9s.roa (hash: G5fDZfDdF/UdXSzqkrIqSIBvAXZx8jiKJDU264Jekto=)
2: SiyGN2LOnZltKrq27eGSnM7ctjI.crl (hash: fi2gIPZylqVmHEn4anDz8rmLGF/jYxAnlXDAbSQNPdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/SiyGN2LOnZltKrq27eGSnM7ctjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/SiyGN2LOnZltKrq27eGSnM7ctjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/SiyGN2LOnZltKrq27eGSnM7ctjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:61:8f:b6:9a:f7:be:66:e1:15:99:a7:55:82:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a2c863762ce9d996d2abab6ede1929ccedcb632
Validity
Not Before: Mar 26 02:01:49 2026 GMT
Not After : Mar 27 02:01:49 2026 GMT
Subject: CN=1eb42f796acc03e911152cfffa3f1517c1351073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:54:6a:57:16:84:f1:49:dc:af:68:39:6e:69:
fe:ff:bf:f0:fc:7d:90:d2:d6:76:41:75:18:1c:13:
4e:c4:70:e6:af:41:f2:03:e6:73:64:e0:af:a4:1a:
67:51:59:5f:28:3a:df:1c:5f:73:7c:90:9c:75:8a:
2c:dc:a3:36:fb:7c:1b:b3:2a:72:b0:19:60:80:d3:
b9:31:ea:af:2b:cd:1f:76:7a:24:79:19:95:39:b9:
02:5c:a1:47:9b:75:9d:0a:72:f6:5e:3c:c1:8e:fe:
e5:26:30:67:11:26:24:57:f6:76:a5:31:e0:9d:4a:
fd:75:93:16:23:b8:4a:5a:0e:65:96:89:c2:5a:90:
f3:b3:12:a1:b9:72:c2:0b:98:36:c6:bd:7f:88:fe:
f8:11:39:9e:ac:aa:23:21:5c:ff:03:ec:91:80:55:
d1:a9:22:69:8f:56:fb:aa:56:8c:69:e5:32:51:ae:
e4:b0:f4:4f:36:c2:6f:44:63:dc:39:14:89:f4:34:
95:fe:80:a5:47:c3:f9:e0:79:c2:b7:3b:52:63:77:
5b:8d:d1:c0:06:ce:6f:cb:3f:c8:ea:1b:76:dc:d7:
c6:a6:7f:d2:0a:35:79:d9:01:f1:86:c9:16:77:c7:
c0:a7:a2:e7:c9:4f:26:5c:ba:8d:23:5a:b2:17:46:
31:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:B4:2F:79:6A:CC:03:E9:11:15:2C:FF:FA:3F:15:17:C1:35:10:73
X509v3 Authority Key Identifier:
keyid:4A:2C:86:37:62:CE:9D:99:6D:2A:BA:B6:ED:E1:92:9C:CE:DC:B6:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SiyGN2LOnZltKrq27eGSnM7ctjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/SiyGN2LOnZltKrq27eGSnM7ctjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/SiyGN2LOnZltKrq27eGSnM7ctjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:80:de:b9:d4:10:49:4f:ee:bf:b4:6f:0a:82:85:45:cb:08:
12:1e:df:48:b5:5f:a0:4f:45:58:02:bc:2e:4d:58:2b:fe:2e:
be:8f:0c:29:6d:0d:6c:03:d4:75:7b:e5:6e:fb:48:02:23:14:
67:e7:4f:cf:5b:a7:a7:b9:23:df:52:d8:78:ac:9a:3f:4a:13:
56:4f:10:a2:2d:5e:b1:64:38:16:7d:2e:30:26:9d:b2:6d:a4:
11:c8:42:2b:ed:68:95:bc:76:86:4a:6e:a6:50:16:cd:f3:06:
73:10:86:5c:ab:1b:49:b3:27:75:59:cd:f1:7b:47:4a:d7:bc:
a6:dd:0f:67:1a:38:f0:03:89:1c:29:8f:98:95:4c:11:0d:d9:
a4:e2:f3:f8:b5:ea:56:b1:46:c3:2b:fa:a3:97:b4:34:30:0b:
c6:bb:c9:16:6b:0f:a9:82:d0:a3:00:5f:48:ab:0f:88:55:a8:
5b:d2:85:4c:20:97:f7:07:b7:6e:b5:cb:be:d9:8f:ee:7a:02:
7f:c9:b0:6a:43:4e:ef:09:99:a2:0b:61:7e:e5:a5:39:b5:44:
11:94:75:c8:ef:90:f1:29:ab:95:43:19:42:08:7b:00:cc:d5:
58:2b:8a:89:48:46:db:fe:e5:06:a9:83:c3:f0:39:bd:88:21:
c0:48:a4:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n4GGPtpr3vmbhFZmnVYLTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhMmM4NjM3NjJjZTlkOTk2ZDJhYmFiNmVkZTE5MjljY2Vk
Y2I2MzIwHhcNMjYwMzI2MDIwMTQ5WhcNMjYwMzI3MDIwMTQ5WjAzMTEwLwYDVQQD
EygxZWI0MmY3OTZhY2MwM2U5MTExNTJjZmZmYTNmMTUxN2MxMzUxMDczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylRqVxaE8Uncr2g5bmn+/7/w/H2Q
0tZ2QXUYHBNOxHDmr0HyA+ZzZOCvpBpnUVlfKDrfHF9zfJCcdYos3KM2+3wbsypy
sBlggNO5MeqvK80fdnokeRmVObkCXKFHm3WdCnL2XjzBjv7lJjBnESYkV/Z2pTHg
nUr9dZMWI7hKWg5llonCWpDzsxKhuXLCC5g2xr1/iP74ETmerKojIVz/A+yRgFXR
qSJpj1b7qlaMaeUyUa7ksPRPNsJvRGPcORSJ9DSV/oClR8P54HnCtztSY3dbjdHA
Bs5vyz/I6ht23NfGpn/SCjV52QHxhskWd8fAp6LnyU8mXLqNI1qyF0YxgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB60L3lqzAPpERUs//o/FRfBNRBzMB8GA1UdIwQY
MBaAFEoshjdizp2ZbSq6tu3hkpzO3LYyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2l5R04yTE9uWmx0S3JxMjdlR1NuTTdjdGpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC83YThlM2MtY2MwMi00MjU1LTk4OTIt
YzQ3MTg0ZmRhYzM5LzEvU2l5R04yTE9uWmx0S3JxMjdlR1NuTTdjdGpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC83YThlM2MtY2MwMi00MjU1LTk4OTItYzQ3MTg0ZmRhYzM5
LzEvU2l5R04yTE9uWmx0S3JxMjdlR1NuTTdjdGpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnoDeudQQ
SU/uv7RvCoKFRcsIEh7fSLVfoE9FWAK8Lk1YK/4uvo8MKW0NbAPUdXvlbvtIAiMU
Z+dPz1unp7kj31LYeKyaP0oTVk8Qoi1esWQ4Fn0uMCadsm2kEchCK+1olbx2hkpu
plAWzfMGcxCGXKsbSbMndVnN8XtHSte8pt0PZxo48AOJHCmPmJVMEQ3ZpOLz+LXq
VrFGwyv6o5e0NDALxrvJFmsPqYLQowBfSKsPiFWoW9KFTCCX9we3brXLvtmP7noC
f8mwakNO7wmZogthfuWlObVEEZR1yO+Q8SmrlUMZQgh7AMzVWCuKiUhG2/7lBqmD
w/A5vYghwEikXA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:25:45 2026 by rpki-client